CVE-2026-71492

creationtimestamp| type| source ---|---|--- 2026-09-02 16:35:33+00:00| published-proof-of-concept| https://github.com/masci/banks/security/advisories/GHSA-x8wg-4xgc-vr54...

SiYuan: SQL Query in Block Search Exposes Hidden Published Document Content

Summary Siyuan's block search endpoint concatenates attacker-controlled paths values into SQL predicates used by non-SQL search modes. Through Siyuan's publish service, an unauthenticated visitor is forwarded to the kernel with a reader-role token and can reach POST /api/search/fullTextSearchBloc...

CVE-2024-4253

creationtimestamp| type| source ---|---|--- 2026-09-02 14:00:04+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik 2026-09-03 00:00:46+00:00| published-proof-of-concept| Telegram/Ksw2WSufgZzZKAWcQpJTvjLIU1b4CHsBIzgYQ-ZNPfik...

CVE-2026-31321

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg...

CVE-2026-36130

creationtimestamp| type| source ---|---|--- 2026-09-02 01:00:04+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg 2026-09-03 00:01:00+00:00| published-proof-of-concept| Telegram/yppx2WWa40cV5hBHui4bTL2VMdAtcaI4VaugdhOfmt8Lg...

PT-2026-86216

CVE ID :CVE-2026-23588 Published : Sept. 2, 2026, 7:52 a.m. | 19 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

EUVD-2026-69699

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-84287 NousResearch hermes-agent Session Chat api_server.py denial of service

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-84287 NousResearch hermes-agent Session Chat api_server.py denial of service

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-68948

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:23+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-mwf2-3pr3-8698...

CVE-2026-68947

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:21+00:00| published-proof-of-concept| https://github.com/axios/axios/security/advisories/GHSA-jqh4-m9w3-8hp9...

CVE-2026-18401

creationtimestamp| type| source ---|---|--- 2026-09-01 20:35:07+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-72hv-8253-57qq...

CVE-2026-73089

creationtimestamp| type| source ---|---|--- 2026-09-01 18:35:04+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-c83g-rgw3-j3cx 2026-09-05 16:13:11+00:00| seen| https://gist.github.com/djlan/e3b6762435f262eb64ea25ec3f8c9d82 2026-09-05 16:19:59+00:00| seen|...

CVE-2026-84111

A flaw has been found in Chanjet CRM up to 20260707. This issue affects some unknown processing of the file jxfdumptable.php. This manipulation of the argument gblOrgID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor...

CVE-2026-84200

creationtimestamp| type| source ---|---|--- 2026-09-01 12:48:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/64xwwmhlajzwr 2026-09-01 13:00:08+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muhhzphk7q2d 2026-09-01 14:07:37+00:00| seen|...

EUVD-2026-69012

A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. The affected element is the function ArmAngstromInstructionSet of the file /CGI?RestApi=SetHostname. Executing a manipulation of the argument ParameterArray can lead to command injection. The attack can be executed remotely. The...

VulnCheck KEV: CVE-2026-5153

A flaw has been found in Tenda CH22 1.0.0.1. The affected element is the function FormWriteFacMac of the file /goform/WriteFacMac. Executing a manipulation of the argument mac can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used...

CVE-2026-82666

A flaw has been found in yaojingang GEOFlow up to 2.1.0. This issue affects the function preview of the file app/Http/Controllers/Admin/SiteThemeEditorController.php of the component Superadmin Theme Editor. This manipulation of the argument blade causes code injection. It is possible to initiate...

CVE-2026-82689

creationtimestamp| type| source ---|---|--- 2026-08-31 06:44:59+00:00| seen| https://infosec.exchange/users/vuldb/statuses/117188768492484602 2026-08-31 11:30:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3muesjv2zil2p...

CVE-2026-82624

code-projects Simple Inventory System 1.0 is affected by an information disclosure vulnerability in the file inventorymanagement.sql , within the Database Backup File Handler component. The specific root cause is described as "some unknown functionality" of that file. The flaw is exploitable remo...